Official Privacy Policy

Privacy Policy Club388 – We Safeguard Your Data as a Trust

At club388, your privacy is not merely a legal obligation — it is a commitment we take seriously every day. This document transparently explains how we collect, use, store, and protect your personal data as a player on our platform.

Updated: 1 January 2026
Malaysia PDPA Compliance
SSL 256-bit
This Document Covers
  • Personal data we collect
  • Purpose and legal basis for data use
  • How we protect your data
  • Data sharing with third parties
  • Your rights as a data subject
  • Cookie and tracking policy
256-bit SSL Encryption
PDPA 2010 Compliance
No Sale of Data to Third Parties
Restricted Data Access
Clear Data Retention Policy

Club388's Six Core Data Protection Principles

Here is how we ensure your personal information stays safe and is used responsibly.

Bank-Grade Encryption

All data transmitted between your device and club388's servers is protected by 256-bit SSL encryption — the same technology used by Malaysian banking institutions to secure online transactions.

Data Minimization

We only collect data that is strictly necessary to deliver our services. No excess information is requested, and every piece of data we collect has a clear and legitimate purpose.

Strict Access Controls

Your personal data is accessible only to staff who need it to perform their duties. All access is logged and continuously monitored by our security team.

Full Control in Your Hands

You have the full right to access, correct, delete, or transfer your data. Data rights requests will be processed within 14 business days at no charge.

No Data Sales

Club388 has never and will never sell your personal data to any third party for marketing or commercial purposes. Your data belongs to you — it is not our commodity.

Malaysia PDPA Compliance

All our data management practices comply with Malaysia's Personal Data Protection Act 2010 (PDPA) and relevant international data protection standards.

Important Note: This Privacy Policy explains how Club388 collects and manages your personal information. By using our platform, you agree to the practices described in this document. Please read it carefully and contact us if you have any questions.
1

Introduction & Scope of Privacy Policy

Club388 takes your privacy seriously. We understand that when you register and play on our platform, you are entrusting us with sensitive personal information — and that trust is something we never take lightly.

This Privacy Policy details how club388, as the responsible data controller, handles the collection, processing, storage, and protection of your personal information. It applies to all users who access our platform via the official club388 website or mobile app.

This policy is prepared in accordance with the requirements of the Personal Data Protection Act 2010 (PDPA) Malaysia and internationally adopted data protection industry standards. We are committed to ensuring all our data management practices remain fully compliant with applicable legal requirements.

If you are under 21 years of age, you are not permitted to use our platform and we will not knowingly collect your personal data. Should we discover that data collected belongs to an individual below the age limit, it will be deleted immediately.

2

Types of Personal Data We Collect

Club388 collects your personal information through several different methods. Below is a full description of the types of data we collect and their sources:

Data Category Example Information Source
Personal Identity Full name, date of birth, MyKad / passport number, selfie photo Account registration & KYC verification
Contact Information Phone number, email address, residential address Registration form
Financial Information Bank account number, account holder name, transaction records Deposit & withdrawal process
Platform Activity Data Game history, wagering logs, claimed promotion records Platform usage
Technical Data IP address, device type, operating system, web browser, cookie data Automatically collected during use
Communication Data Live chat conversation records, support emails, complaint tickets Interactions with customer support

We do not collect data falling under sensitive categories such as health information, political views, religious beliefs, or biometric data, unless specifically stated and with your consent.

3

How We Use Your Data

Every piece of data we collect is used for a clear and lawful purpose. We do not use your data for unrelated purposes without first obtaining your consent.

  • Account management: To create, verify and manage your user account on the club388 platform.
  • Transaction processing: To process deposits, withdrawals and all financial transactions securely and accurately.
  • Identity verification (KYC): To fulfil legal compliance requirements related to player identity verification.
  • Customer support: To provide effective assistance when you contact our support team.
  • Platform security: To detect and prevent fraudulent activity, hacking or platform misuse.
  • Legal compliance: To fulfil applicable legal and regulatory obligations, including anti-money laundering (AML) requirements.
  • Service improvement: To analyse usage patterns and improve platform quality and user experience.
  • Important communications: To send account-related notifications, policy updates or important security information.
Separate Consent for Marketing: We only send you marketing communications, promotions, or offers if you have given explicit consent. You may withdraw this consent at any time through your account settings or by contacting our team.
4

Legal Basis for Data Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), club388 only processes your personal data on a valid legal basis. Depending on the type of data and purpose of processing, the legal bases we rely on are:

  • Consent: For marketing communications and non-essential data use beyond delivering the service.
  • Contract performance: To process transactions, manage your account and deliver the services you request.
  • Legal obligation: To meet AML/KYC compliance requirements and reporting obligations to relevant authorities.
  • Legitimate interest: To prevent fraud, ensure platform security and improve service quality.

We always select the most appropriate legal basis with the least impact on your privacy for each data processing activity.

5

Data Sharing with Third Parties

Club388 does not sell, rent, or disclose your personal data to third parties for their own marketing or business purposes. We only share data in limited and controlled circumstances as follows:

  • Service providers: Companies we engage to operate the platform, including payment processing providers, identity verification service providers, and cloud computing infrastructure providers. All such providers are bound by strict confidentiality agreements.
  • Relevant authorities: Government agencies or law enforcement bodies when required by law or a valid court order.
  • Parties receiving business transfers: Should club388 be involved in a merger, acquisition or asset transfer, user data may form part of the transferred assets, with prior notice given to you.
International Data Transfers: Some of our service providers operate outside Malaysia. In such cases, we ensure data transfers are carried out with adequate safeguards through data processing agreements that meet or exceed the security standards of Malaysia's PDPA.
6

Data Security & Protection Measures

Your data security is the top priority at club388. We continuously invest in security technologies and processes to ensure your data is protected from unauthorized access, disclosure, alteration, or destruction.

  • Encryption in transit: All communications between your device and our platform are secured with TLS 1.3 / SSL 256-bit encryption.
  • Encryption at rest: Sensitive data such as financial information and identity verification documents is stored with the highest level of protection using AES-256 encryption.
  • Role-based access control (RBAC): Staff may only access data relevant to their role. Access to sensitive data requires tiered authorization.
  • Continuous monitoring: Our systems are monitored 24/7 to detect any suspicious activity or intrusion attempts.
  • Regular security audits: We conduct regular security audits and independent penetration testing.
  • Staff training: All club388 staff receive regular data protection training as part of the company's security culture.

While we take all reasonable precautions, no digital system can be guaranteed 100% secure against cyber threats. In the event of a data breach that affects you, we are committed to notifying you within the timeframe required by law.

7

Data Retention Period

Club388 does not retain your personal data longer than necessary for the purpose it was collected, or as required by applicable legal obligations.

Data Type Retention Period Reason
Active account data Throughout the active account period Platform operational requirements
Financial transaction records 7 years after transaction Financial & AML legal obligations
KYC Documents 5 years after account closure AML/KYC compliance requirements
Game activity logs 2 years Dispute resolution & audits
Support communication records 3 years Referrals & service improvement
Marketing data Until consent is withdrawn Based on user consent

Upon expiry of the retention period, your data will be permanently deleted or anonymised, whichever is more appropriate given the context of the data.

8

Your Rights as a Data Subject

Under the Malaysia PDPA and club388's privacy policy, you have the following rights regarding your personal data. We are committed to processing all data rights requests within 14 business days.

Right of Access

You have the right to obtain a copy of the personal data we hold about you and information on how it is used.

Right to Rectification

You have the right to request correction of inaccurate or incomplete data about you at no charge.

Right to Erasure

You have the right to request deletion of your data in certain circumstances, subject to legal obligations that prevent such deletion.

Right to Object

You have the right to object to the processing of your data for specific purposes, including direct marketing.

Right to Data Portability

You have the right to receive your data in a machine-readable format for transfer to another service provider.

Right to Restriction of Processing

You have the right to request that we restrict the processing of your data in certain circumstances while a dispute is being resolved.

To exercise any of the above rights, please contact our privacy team by email at [email protected] or via our platform's live chat. We will not charge a fee for reasonable data rights requests.

9

Cookies & Tracking Technologies

Club388 uses cookies and similar tracking technologies to enhance the user experience and support essential platform functions. The types of cookies we use are as follows:

  • Essential Cookies: Required to support core platform functions such as login authentication and session management. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collects information on how you use the platform to help us improve site speed and usability.
  • Functional Cookies: Remembers your preferences such as language and display settings to provide a more personalized experience.
  • Analytics Cookies: Helps us understand aggregated traffic and user behavior to improve platform content and design.

You can manage cookie settings through your web browser. Disabling certain cookies may affect your platform experience but will not prevent you from accessing it entirely.

10

Privacy Policy Changes

Club388 reserves the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological developments. Every update will be accompanied by a new "Updated" date at the top of this document.

For significant changes — particularly those affecting your rights or how we use your data — we will proactively notify you via in-app notifications or by email to the address registered on your account.

Your continued use of club388 after any privacy policy changes take effect will be considered your acceptance of the updated terms. If you disagree with the changes, you have the right to close your account and we will process your data deletion in accordance with the applicable retention policy.

11

Contact Our Privacy Team

If you have any questions, concerns or requests regarding this Privacy Policy or the management of your personal data, please do not hesitate to contact us:

  • Privacy Email: [email protected] (mark subject as: "Privacy Inquiry")
  • Live Chat: Available 24/7 via the chat icon on the platform or mobile app
  • Response Time: Privacy inquiries are answered within 3 working days; data rights requests within 14 working days

You also have the right to lodge a complaint with Malaysia's Personal Data Protection Department (PDPD) if you believe your privacy rights have been violated and we have failed to resolve the issue satisfactorily.

Our Commitment: Club388 is committed to being a responsible and transparent data controller. If you are not satisfied with how we handle your data, we want to know so we can improve our practices. Your feedback matters to us.

Your Data is Safe – Join club388 with Confidence

Join over 500,000 Malaysian players who trust club388. Register a free account and enjoy online entertainment with complete peace of mind.

Bahasa Melayu